# SSL

# Adăugare certifcat SSL în baza de date NSS

<div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk-1.-extragere-pem-din"><div>**1. Extragere PEM din PFX:**</div>  
</div>```
openssl pkcs12 -in filename.pfx -out cert.pem -nodes

```

<div class="code-block ng-tns-c3578594610-77 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation" id="bkmrk-"><div class="formatted-code-block-internal-container ng-tns-c3578594610-77"><div class="animated-opacity ng-tns-c3578594610-77"></div></div></div><div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk-2.-pentru-convertare"><div>---

**2. Pentru convertarea din .pem in pkcs12 pentru a fi folosit in baza NSS folosim următoarea comandă:**</div>  
</div>```
openssl pkcs12 -export -in cert.pem -out cert.p12 -name "MAIB_CERT"

```

<div class="code-block ng-tns-c3578594610-78 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation" id="bkmrk--1"><div class="formatted-code-block-internal-container ng-tns-c3578594610-78"><div class="animated-opacity ng-tns-c3578594610-78"></div></div></div><div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk-3.-pentru-a-importa-"><div>---

**3. Pentru a importa certificatul .p12 în baza de date NSS folosim următoarea comandă**</div>  
</div>```
pk12util -i cert.p12 -d sql:/etc/pki/nssdb

```

<div class="code-block ng-tns-c3578594610-79 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation" id="bkmrk--2"><div class="formatted-code-block-internal-container ng-tns-c3578594610-79"><div class="animated-opacity ng-tns-c3578594610-79"></div></div></div><div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk-4.-pentru-a-verifica"><div>---

**4. Pentru a verifica certificatele disponibile in bază:**</div>  
</div>```
certutil -L -d sql:/etc/pki/nssdb

```

<div class="code-block ng-tns-c3578594610-80 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation" id="bkmrk--3"><div class="formatted-code-block-internal-container ng-tns-c3578594610-80"><div class="animated-opacity ng-tns-c3578594610-80"></div></div></div><div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk-5.-%C8%98tergere-certific"><div>---

**5. Ștergere certificat din bază:**</div><div></div></div>```
certutil -D -d sql:/etc/pki/nssdb -n "MAIB_CERT"

```

<div class="code-block ng-tns-c3578594610-81 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation" id="bkmrk--4"><div class="formatted-code-block-internal-container ng-tns-c3578594610-81"><div class="animated-opacity ng-tns-c3578594610-81"></div></div></div>---

<div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk--7"></div>

# Generare SSL dupa procurare

---

### 1. Generarea CSR (cererea pentru certificat)

<div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk-%C2%A0login-to-plesk-%C2%A0-%3E-">- <div> [LOGIN TO PLESK ](https://my.host.md/knowledgebase/3/Login-to-PLESK.html) -&gt; **Websites &amp; Domains** -&gt; **SSL/TLS Certificates** -&gt; **Advanced Settings** -&gt; **Add SSL/TLS Certificate** </div>

</div>[![Pbt3n4fVqj.png](https://kb.host.md/uploads/images/gallery/2026-09/scaled-1680-/r1t7h1JdtWQVqDx6-pbt3n4fvqj.png)](https://kb.host.md/uploads/images/gallery/2026-09/r1t7h1JdtWQVqDx6-pbt3n4fvqj.png)

<div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk-completa%C8%9Bi-datele%3A-n">- <div>Completați datele:</div>
    - <div>**Name**: Denumire/Perioadă (ex: 2026-2027)</div>
    - <div>**Bits**: 2048</div>
    - <div>**Country**: Moldova, Republic of</div>
    - <div>**State/Province**: Raion</div>
    - <div>**City**: Oraș</div>
    - <div>**Organization**: Nume companie/instituție</div>
    - <div>**Domain name**: Nume domeniu (ex: `domeniu.md`)</div>
    - <div>**Email**: Email valid</div>
- <div>Apăsați **Request** -&gt; Deschideți certificatul creat -&gt; Copiați codul **CSR**.</div>

</div>[![0pNHyqG8J0.png](https://kb.host.md/uploads/images/gallery/2026-09/scaled-1680-/NaRz9ekLtd4SZrrs-0pnhyqg8j0.png)](https://kb.host.md/uploads/images/gallery/2026-09/NaRz9ekLtd4SZrrs-0pnhyqg8j0.png)

<div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk-autentificare-plesk-"></div>---

### 2. Generarea certificatului SSL

<div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk-autentificare-cont-c">- <div>Autentificare cont client [my.host.md](https://my.host.md/) -&gt; **Servicii** -&gt; Selectați serviciul SSL activ -&gt; **Configure Now**.</div>
- <div>Setări:</div>
    - <div>**Web Server Type**: Selectați `PLESK`.</div>
    - <div>Lipiți codul **CSR**.</div>
    - <div>Apăsați **Click to Continue**.</div>
- <div>Selectați adresa de email pentru confirmare DV (trebuie să fie accesibilă).</div>

</div>---

### 3. Confirmarea solicitării

<div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk-deschide%C8%9Bi-emailul-p">- <div>Deschideți emailul primit pe adresa de confirmare.</div>
- <div>Accesați link-ul din mesaj pentru a aproba generarea.</div>

</div>---

### 4. Recepționarea certificatului

<div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk-desc%C4%83rca%C8%9Bi-arhiva-.z">- <div>Descărcați arhiva `.zip` primită pe email după confirmare.</div>

</div>---

### 5. Instalarea certificatului în Plesk

<div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk-extract-fi%C8%99iere-.zip">- <div>Extract fișiere `.zip` local.</div>
- <div>Plesk -&gt; **SSL/TLS Certificates** -&gt; Deschideți certificatul de la Pasul 1 -&gt; **Upload the certificate files**:</div>
    - <div>**Certificate (\*.crt)**: <div>Încărcați `<strong>yourdomain</strong>_md.crt` </div><div>sau `Your EssentialSSL Certificate - <strong>yourdomain</strong>_md.crt`</div></div>  
        \*\*CA certificate (\*-ca.crt)\*\* - Trebuie setate ambele consecutiv:
        
        \- Intermediate CA Certificate - SectigoPublicServerAuthenticationCADVR36.crt
        
        Dacă mai apar eventuale întrebări, vă rugăm, nu ezitați să le oferiți.
    - <div>**CA certificate (\*-ca.crt)**: <div>Încărcați `SectigoRSADomainValidationSecureServerCA.crt ` </div><div>sau `Intermediate CA Certificate - SectigoPublicServerAuthenticationCADVR36.crt` </div>  
        </div>
- <div>Apăsați **Upload Certificate**</div>

</div>[![1asd.png](https://kb.host.md/uploads/images/gallery/2026-09/scaled-1680-/fWJSWpOfOVeAnbjm-1asd.png)](https://kb.host.md/uploads/images/gallery/2026-09/fWJSWpOfOVeAnbjm-1asd.png)

<div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk--13"></div><div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk--14"></div>---

### 6. Activarea certificatului pe site

<div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk-naviga%C8%9Bi-la-websites">- <div>Navigați la **Websites &amp; Domains** -&gt; **Hosting Settings**.</div>
- <div>La **Certificate**, selectați certificatul instalat -&gt; Apăsați **OK**</div>

</div>[![image.png](https://kb.host.md/uploads/images/gallery/2026-08/scaled-1680-/If72YuydTR80S5Zk-image.png)](https://kb.host.md/uploads/images/gallery/2026-08/If72YuydTR80S5Zk-image.png)

[![image.png](https://kb.host.md/uploads/images/gallery/2026-08/scaled-1680-/YQHxvcsAropDGUo7-image.png)](https://kb.host.md/uploads/images/gallery/2026-08/YQHxvcsAropDGUo7-image.png)

---

<div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk--19"></div>### Informație importantă despre valabilitate

<div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk-valabilitate-maxim%C4%83-">- <div>Valabilitate maximă certificate SSL: **199 zile**.</div>
- <div>Reutilizare validare: DV până la 199 zile, OV până la 397 zile.</div>
- <div>La expirare: Procedura de instalare se reia.</div>

</div>---

---

---

<div class="markdown markdown-main-panel md-content enable-luminous-fast-follows enable-updated-hr-color stronger tutor-markdown-rendering" dir="ltr" id="bkmrk--24"></div>

# SSL Let's Encrypt - instalare / reinoire

##### <span style="color:rgb(51,51,51);background-color:rgb(255,255,255);">1 - Accesați modulul „</span>**SSL/TLS Certificates**<span style="color:rgb(51,51,51);background-color:rgb(255,255,255);">”</span>

[![image.png](https://kb.host.md/uploads/images/gallery/2026-09/scaled-1680-/BKeWXLBY547RD2T8-image.png)](https://kb.host.md/uploads/images/gallery/2026-09/BKeWXLBY547RD2T8-image.png)

---

##### <span style="color:rgb(51,51,51);background-color:rgb(255,255,255);">2 - Dați clic pe butonul „</span>**Reissue Certificate**<span style="color:rgb(51,51,51);background-color:rgb(255,255,255);">” ( sau puteti avea doar 'Install' daca nu mai sunt certificate instalate )</span>

[![image.png](https://kb.host.md/uploads/images/gallery/2026-09/scaled-1680-/h67uRVksfpTCsgW0-image.png)](https://kb.host.md/uploads/images/gallery/2026-09/h67uRVksfpTCsgW0-image.png)

---

##### 3 - <span style="color:rgb(51,51,51);background-color:rgb(255,255,255);">Alegeți opțiunea „</span>**-** ***Install*** **- a free basic certificate provided by Let's Encrypt**<span style="color:rgb(51,51,51);background-color:rgb(255,255,255);">” din partea de jos a meniului apărut</span>

[![ydNyFgtUT05iqja0-ov27m994dubndy3r-image.png](https://kb.host.md/uploads/images/gallery/2026-09/scaled-1680-/JNEIpwMUy0QQtN8a-ydnyfgtut05iqja0-ov27m994dubndy3r-image.png)](https://kb.host.md/uploads/images/gallery/2026-09/JNEIpwMUy0QQtN8a-ydnyfgtut05iqja0-ov27m994dubndy3r-image.png)

---

##### 4 - <span style="color:rgb(51,51,51);background-color:rgb(255,255,255);">Configurați opțiunile necesare și apăsați butonul „</span>**Get it free**<span style="color:rgb(51,51,51);background-color:rgb(255,255,255);">”</span>

[![image.png](https://kb.host.md/uploads/images/gallery/2026-09/scaled-1680-/tzeqCEIzBjd8fLgK-image.png)](https://kb.host.md/uploads/images/gallery/2026-09/tzeqCEIzBjd8fLgK-image.png)

---

---

---